never-displayed
View discussion in a popup
I have a similar situation. I allow them to create a snapshot manually but not delete or revert to it. Then I have a script run at the end of the day to delete it. You could copy a role and modify it. You can get pretty granular with that.